Content by Anna Delaney

Optimal Strategies for Building Better Collective Defenses

Anna Delaney  •  January 4, 2023

Arizona has long been a leader in leveraging IT and providing digital services, but across the state and country alike, new challenges are emerging in the wake of the pandemic, and with them come new threats and risk factors, including remote work security, says Ryan Murray, deputy state CISO.

Why a 'Paradigm Shift' is Required in the SOC

Anna Delaney  •  January 2, 2023

False positives continue to be a challenge for SOC analysts. Nat Smith, senior director analyst at Gartner, the global research and advisory company, is calling for enterprises to embrace a "paradigm shift" in the security operations center.

Why MFA Can't Combat Growing Infostealer Malware Attacks

Anna Delaney  •  December 31, 2022

According to Accenture Security's Cyber Threat Intelligence team, information stealer malware - malicious software designed to steal information, including passwords - became one of the most discussed malware types on the cybercriminal underground in 2022.

ISMG Editors Panel: Looking Back on 2022

Anna Delaney  •  December 30, 2022

In the latest update, four ISMG editors discuss important issues of 2022, including: CISO Marene Allison's unique career path; Ukrainian government cybersecurity official Victor Zhora on lessons learned from countering cyberattacks; and insights from CEO Nikesh Arora of Palo Alto Networks.

Why Governments Should Give Incentives for Collaboration

Anna Delaney  •  December 29, 2022

Global Cyber Alliance CEO Philip Reitinger shares updates on the alliance's Internet Integrity and Capacity & Resilience programs, which tackle key challenges of internet infrastructure, privacy and safety. Success is measured by the number of partners and "who is using the platform," he says.

Predicting the Cybersecurity Future: Experts Preview 2023

Anna Delaney  •  December 29, 2022

The latest edition of the ISMG Security Report shares tips for security leaders to navigate the threat landscape next year, discusses cybersecurity and privacy policy shifts to watch, and explains why global political and economic instability should not be cause for cybersecurity budgets to drop.

Expert Gives Another Reason to Fear the Phish: Smart AI Bots

Anna Delaney  •  December 27, 2022

ChatGPT, an AI-based chatbot that specializes in dialogue, is raising concern among security professionals about how criminals could use cheap, accessible natural language AI to write convincing phishing emails and pull off nefarious deepfake scams. Peter Cassidy discusses the implications.

A Look Ahead: Cybersecurity Trends to Watch in 2023

Anna Delaney , Cal Harrison  •  December 26, 2022

Information Security Media Group asked some of the industry's leading cybersecurity experts about the trends to watch in 2023. Responses covered a variety of emerging threats and evolving trends affecting security technologies, leadership and regulation. Here is a look at the year ahead.

ISMG Editors: Why Zero Trust Isn't the Answer to Everything

Anna Delaney  •  December 23, 2022

A salute to the career of Johnson & Johnson CISO Marene Allison leads this week's Information Security Media Group Editors' Panel, which also reviews essentials for implementing a zero trust strategy and the use of banking standards to regulate blockchain-based digital assets.

UK Moves to 'Name and Shame' Firms for Complaints, Breaches

Anna Delaney  •  December 22, 2022

In a surprise move, Britain's Information Commissioner's Office recently named names - lots of names - on the data breach front. The ICO has published detailed information about breaches of personal data, complaints and the civil investigations. Attorney Edward Machin explains the implications.

Ransomware Experts Agree: Don't Buy Data Deletion Promises

Anna Delaney  •  December 22, 2022

The latest edition of the ISMG Security Report discusses why it is always a bad idea for organizations to pay hackers for data deletion, practical steps organizations can and should take to avoid being at the heart of a data subject complaint, and the latest efforts to tackle the ransomware threat.

Profiles in Leadership: Mike Manrod

Anna Delaney  •  December 19, 2022

CISO Mike Manrod of Grand Canyon Education is seeing very clever evasion tactics employed by initial access brokers who gain "an initial foothold into a network or into a set of infrastructure and then sell that foothold or get that foothold for an affiliated partner organization."

How CISOs Can Guard Against Their Own Liability

Anna Delaney  •  December 16, 2022

In October, former Uber CSO Joe Sullivan was convicted of covering up a 2016 data breach. The trial likely marked the first time a chief security officer had faced criminal charges over incident response. Attorney Jonathan Armstrong says, "This trend is going to be difficult to put back in the box."

ISMG Editors: Payments Special

Anna Delaney  •  December 16, 2022

In the latest weekly update, Troy Leach, chief strategy officer at Cloud Security Alliance, joins ISMG editors to discuss the latest innovation in the payments space and accompanying risks, as well as how the case of Sam Bankman-Fried's failed cryptocurrency exchange will affect regulatory actions.

New AI Bot Could Take Phishing, Malware to a Whole New Level

Anna Delaney , Anviksha More  •  December 15, 2022

Anything that can write a software code can also write malware. The latest AI technology can do it in seconds. Even worse, it could open the door to rapid innovation for hackers with little or no technical skills or help them overcome language barriers to writing the perfect phishing email.